Commit Graph

560 Commits

Author SHA1 Message Date
Saketh Kalaga 121d47db90
Update authentication.md
Azure Active Directory is now Microsoft Entra ID.
Changing for the sake of correctness.
2024-01-19 01:06:19 +05:30
hunshcn bcc55ae7c9
fix outdated link/anchor
Signed-off-by: hunshcn <hunsh.cn@gmail.com>
2024-01-03 15:00:11 +08:00
Takashiidobe d536e46dbd fix typos 2023-12-24 21:00:53 -05:00
Anish Ramasekar fcfeeac989
fix value in structured authn config example
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-12-13 21:43:11 +00:00
drewhagen deaf1b920a Merge remote-tracking branch 'upstream/main' into dev-1.29 2023-11-29 15:33:49 -06:00
Suruchi Kumari c0a72d25d8
added doc for setting up cloud provider kubectl auth via plugin
Signed-off-by: GitHub <noreply@github.com>
2023-11-29 13:26:04 +00:00
Kubernetes Prow Robot 7c2f5c4583
Merge pull request #43397 from aramase/aramase/d/kep_3331_v1alpha1_docs_v1.29
add docs for StructuredAuthenticationConfig v1alpha1
2023-11-28 09:47:41 +01:00
Anish Ramasekar 74caa0daaa
review feedback
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-27 20:03:23 +00:00
Kubernetes Prow Robot 123973c2e8
Merge pull request #41892 from palnabarun/authz-config-docs
Add docs for Authorization Configuration
2023-11-27 13:59:40 +01:00
Nabarun Pal 21ac70ee24
Wrap markdown text
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-27 16:16:40 +05:30
Nabarun Pal 03e2976d90
Add more context to downgrade example
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-24 12:03:35 +05:30
Kat Cosgrove 2d9fbc1c7e
Merge remote-tracking branch 'upstream/main' into dev-1.29 2023-11-22 22:07:26 +00:00
Kubernetes Prow Robot 421821d5fa
Merge pull request #43563 from yt2985/dev-1.29
Add LegacyServiceAccountTokenCleanUp feature in beta
2023-11-22 18:47:18 +01:00
Nabarun Pal 10568634b5
Update from code review
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-22 10:22:33 +05:30
Anish Ramasekar 01e6f317e3
add docs for StructuredAuthenticationConfig v1alpha1
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
2023-11-21 19:28:05 +00:00
Taahir Ahmed 6dd3091e55 ClusterTrustBundles: Document projected volumes 2023-11-21 09:22:39 -08:00
chansuke 244c6353bd Improve documentation for `kubernetes.io/enforce-mountable-secrets` annotation on `ServiceAccount` 2023-11-22 00:46:34 +09:00
Nabarun Pal 5627db2720
add documentation for AuthorizationConfiguration
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-11-20 08:58:49 +05:30
Oluebube Princes Egbuna f893a19ee6 Resolved merge conflict when merging main into dev-1.29 branch 2023-11-19 16:02:40 +01:00
windsonsea 676f862137 Clean up /access-authn-authz/authentication.md 2023-11-17 21:32:04 +08:00
tinatingyu bcb527b5be Add LegacyServiceAccountTokenCleanUp feature to beta 2023-11-16 17:21:26 +00:00
Monis Khan 42c9e4e20f
KEP-4193: bound service account token improvements
Signed-off-by: Monis Khan <mok@microsoft.com>
2023-11-16 08:48:59 -05:00
steve-hardman 20e6cba5fe
Fix broken link in "Validating Admission Policy" page (#43893)
* Fix typo

* Fix typo

Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>

---------

Co-authored-by: Dipesh Rawat <rawat.dipesh@gmail.com>
2023-11-14 08:02:32 +01:00
Cici Huang fc92afd819 Remove the escape. 2023-10-30 16:38:15 +00:00
Shubham fba4f6cb2f
Removed outdated information for SA and Added the Note for Manually created Secret API objects. (#43451)
* Removed outdated information for SA and Added the Note for Manually created Secret API objects.

* Modified the Note.

* Simplified the Note.
2023-10-26 02:50:01 +02:00
Tony Gorman 01d9e07e27
Update admission-controllers.md
Sentence seems grammatically incorrect
2023-10-17 17:32:46 +01:00
Kubernetes Prow Robot 84fd32d13c
Merge pull request #41682 from Shubham82/Add_subj_command_option
Add -subj Command Option.
2023-10-10 09:45:22 +02:00
Michael 318ff2e797 Clean up kubelet-tls-bootstrapping.md 2023-10-07 09:02:41 +08:00
Qiming Teng 29b1f8f482 Tweak line wrappings for the node authorization page 2023-10-02 17:11:14 +08:00
Qiming Teng eaf599bd20 Remove oudated information about Node authorization
The content about v1.6-1.8 should be removed to avoid confusion.
2023-10-02 17:11:07 +08:00
nnlkcncff f932a74483
fix description --oidc-issuer-url.md (#42941)
* fix description --oidc-issuer-url.md

https://accounts.google.com/           <= above
└─ .well-known/openid-configuration    <= below

* Update authentication.md

Fixed the description of `--oidc-issuer-url`.
2023-09-27 16:22:38 -07:00
Matheus Moraes c64c7837c8
add CEL Playground link 2023-09-08 16:42:43 -03:00
Mengjiao Liu e8b136c3b3 Use code_sample shortcode instead of code shortcode 2023-09-05 17:10:14 +08:00
Qiming Teng 60bf42a527 Update test cases for v1.28
This PR makes sure the manifests under `content/en/examples`
are valid in v1.28. The primary fixes are:

- Updated the go.mod/go.sum file for testing against v1.28.0 release.
- Revise test case code to ensure newly added manifests are tested;
- Adapt Pod validation options to upstream validation code change;
- Move a ValidatingWebhookConfiguration YAML back to inline because
  the manifest cannot validate against the validator. The CA bundle
  referenced is not a valid string (base64 encoded). That means the
  YAML cannot be used/tested as is by users.
2023-08-18 09:03:30 +08:00
Kubernetes Prow Robot 5755e4362a
Merge pull request #42060 from a-hilaly/beta-match-conditions
Graduate AdmissionWebhookMatchConditions to beta
2023-08-09 08:49:51 -07:00
Tim Bannister 20b43d6095
Merge branch 'main' into 'dev-1.28' 2023-08-09 11:13:31 +01:00
Amine 42078a08fb Fix typos and add comments to the match conditions example 2023-08-09 09:38:48 +02:00
Alex Zielenski fe7759b734
ValidatingAdmissionPolicy: add docs for new per namespace policy params feature (#42219)
* document per namespace params

* switch examples to codenew, fixup some typos

* more formatting and codenew

* use codenew instead of code

* fixup headings
2023-08-08 13:35:52 -07:00
Amine 2218f3d573 Remove note stating that we need AdmissionWebhookMatchConditions to be enabled explicitely 2023-08-08 20:02:35 +02:00
Jiahui Feng 4dfef3e53f
Document ValidatingAdmissionPolicy variable composition and namespaceObject (#42220)
* variable composition.

* mention namespaceObject.

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* separate commands from output.

* YAML comment.

* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* no shell prompt.

* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md

Co-authored-by: Joe Betz <jpbetz@google.com>

* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md

Co-authored-by: Joe Betz <jpbetz@google.com>

---------

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
2023-08-08 07:52:16 -07:00
Kubernetes Prow Robot e168005b37
Merge pull request #42270 from skrobul/validating-and-mutation-controllers
admission controllers: document types
2023-08-03 15:46:20 -07:00
Mengjiao Liu 68ba9633a2 Switch English to use code not codenew shortcode 2023-08-01 16:57:17 +08:00
Marek Skrobacki f900debc63
admission controllers: put type information at top of section
Signed-off-by: Marek Skrobacki <skrobul@skrobul.com>
2023-07-28 18:02:02 +01:00
Marek Skrobacki fce6bfc32f
admission controllers: document types
Signed-off-by: Marek Skrobacki <skrobul@skrobul.com>
2023-07-28 11:08:32 +01:00
Amine 9bac8cfc1a
Add note on max number of match condition elements a user can define per webhook 2023-07-25 19:54:51 +01:00
Andrey Goran eb522c126f
Replace {{< codenew ... >}} with {{% codenew ... %}} in all English docs (#42180)
* Replaced {{< codenew ... >}} with {{% codenew ... %}} in all files

* Reverted changes in non-english localizations
2023-07-25 05:54:06 -07:00
Amine f9c824917f convert the `ValidatingWebhookConfiguration` example into a manifest using a codenew shortcode 2023-07-24 23:10:55 +01:00
windsonsea 5fa005a106 fix bullets in validating-admission-policy 2023-07-10 13:00:43 +08:00
Rishit Dagli e7cf1ca19b
Merge dev-1.28 into main 2023-07-04 19:21:49 -04:00
Nabarun Pal 83bb609c1e
add authorization config documentation
Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>
2023-06-30 23:25:34 +05:30